diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index bac277c945..64437b73af 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -75,6 +75,13 @@ jobs:
   govulnech:
     name: Golang Vulncheck
     runs-on: 'ubuntu-latest'
+
+    timeout-minutes: 360
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -85,4 +92,5 @@ jobs:
 
       - name: Run go vulncheck
         uses: Templum/govulncheck-action@v1.0.0
-        go-version: ${{ env.GO_VERSION }}
+        with:
+          go-version: ${{ env.GO_VERSION }}